
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
Run TeamShift agent teams from your terminal. Metered by usage — no model key of your own required.
Run TeamShift agent teams from your terminal. Metered by usage — you do not bring your own model key, so a run costs you TeamShift credit rather than an Anthropic or OpenAI bill.
npx teamshift login
npx teamshift catalog # prebuilt teams you can add
npx teamshift add code-audit-swarm # adds it to your workspace
npx teamshift run <team-id> "review services/api for auth mistakes"
teamshift teams lists everything callable, including teams you built yourself
in the portal. add is idempotent — running it twice will not duplicate a team
or overwrite edits you have made to it.
The reason to reach for the CLI instead of the API: one command dispatches many prompts at once and reports what each one cost.
npx teamshift run <team-id> \
-p "audit auth" -p "map the schema" -p "find dead code" --concurrency 3
STATUS CHARGE TIME PROMPT
───────── ────── ──── ───────────────
completed $1.20 4.1s audit auth
completed $1.20 4.0s map the schema
completed $1.20 4.0s find dead code
3 run(s) · $3.60 total · 8.1s wall clock (12.1s if run one at a time)
--file prompts.txt reads one prompt per line. Concurrency is bounded (default
5) so a large batch does not trip the API's write rate limit.
Prefer the MCP server — it exposes the same teams as tools inside your existing agent, with no second CLI to learn. Both install commands are in the portal under Programmatic setup.
TEAMSHIFT_API_KEY wins over the stored config, so CI never has to write a file.
teamshift login writes ~/.teamshift/config.json at mode 0600.
TEAMSHIFT_API_URL overrides the endpoint.
| Code | Meaning |
|---|---|
0 | every run reached a terminal status |
1 | usage error, auth failure, or at least one run failed to dispatch |
2 | out of credit — add credits and rerun |
This package is private: true so a workspace-wide publish cannot push it by
accident. Releasing is deliberate: set private: false, pnpm build, then
npm publish.
FAQs
Run TeamShift agent teams from your terminal. Metered by usage — no model key of your own required.
The npm package teamshift receives a total of 1 weekly downloads. As such, teamshift popularity was classified as not popular.
We found that teamshift demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.